Godot is free and open source for everyone, and it only survives through community support. To keep it independent and sustainable, we need your help. Please donate, and thank you to everyone who makes Godot possible.
Feel bad about hoarding RAM that could be used by Sam? No worries, I just launched https://uploadyourram.org/ so you can give your RAM to those in need
The trillion dollar monsters are all focusing on *finding* issues at high speed in large volumes. Hardly any of them care about *fixing* these problems with any sense of quality.
okay now that we have some attention on alpine Linux and other under-resourced major-used projects that are flooded with AI security reports and fixes, can we get some funding uwu?
once again i advise anyone relying on qtwebengine to not because as far as i can tell, its chromium 140-based branch has been mostly untested since september
i've done 5 or 6 bumps in it since then because they pull in secfixes, every bump has so far been a bunch of haphazardly done secfixes where at least one of them should be impossible to build in any configuration because they omitted inclusion of some other upstream part + maybe a fix for the breakage that happened last time
using the tarball is dangerous because it's riddled with vulns, using the branch is better but leaving making sure it builds and works to distros seems kind of bad (even though i'm doing my best to ensure it does work)
new startup idea: domain hoarding for possible vulnerability names
Every time I see rust people saying rubbish like "Can we stop using C already?", I want to use C for my projects just to spite them.
How about you let me use language I want, huh? It's *my* project, not yours.
Besides, if you want more people to use language you like so much, fix the cargo mess first.
Thank you @sunweaver for this well considered objection to #Debian handing more control to a wasteful, unreliable, proprietary #LLM for core workflows.
βDesigning Debian's package submission process in a way that it makes it depend so strongly on LLM technology creates a massive dependency on companies and politics I would never want to work with or work for. Ethically, this is a total no go. From digital sovereignty perspective it is just sad.β
Skill (n., 2023) - an ability to perform a task as a result of learning
Skill (n. 2026) - a text file; can be used to avoid learning
RISC-V: splits everything into small extensions
Hardware vendors:
RE: https://logoff.website/@jason/117507760889329238
Hard disagree. You should volunteer and you should feel good for volunteering. You should accept the appreciation and credit you get for it.
And you should feel good when taking care of your family and friends and your daily life stuff.
What you absolutely should not, is feel bad for the things you didn't do as volunteer, or feel bad for prioritizing family and friends and your own life over open source.
Take a break from volunteering and feel good for doing so, even if the world is burning.
My passord is a single * and i run #AlpineLinux. Am I vulnerable?
Urgent: Immediately set 'PasswordAuthentication no' in /etc/ssh/sshd_config and restart the sshd service. Make sure you have ssh key authentication or other ways to access your machines.
Also make sure to update openssh to the latest version.
The openssh fix will be backported all the way back to Alpine 3.16
New patch releases for Alpine Linux:
3.21.10
3.22.8
3.23.8
3.24.4
- A security fix in apk-tools 3.0.9 and 2.14.13 to prevent crashing on certain malformed data.
https://alpinelinux.org/posts/alpine-3.21.10-3.22.8-3.23.8-3.24.4-released/
Wow, Google, wow. You're determined to burn off what goodwill you have left in the world, aren't you?
https://futurism.com/future-society/google-search-engine-access-schools-ban-ai
Resolved Issues in mBoot for macOS 27.3 beta:
βFixed: Only a single core is available when you boot Linux or other third-party operating systems from a custom raw boot object on Mac computers with M5 Pro, M5 Max, and M5 Ultra chips. (182898702) (FB23916610)β
https://developer.apple.com/documentation/macos-release-notes/macos-27_3-release-notes#Resolved-Issues